cyber.hendryadrian.com
Security News · socprime.com

SOC Prime’s LogTotal Adds Support for Four SIEM and EDR Platforms

· Original article ↗

Summary

SOC Prime says LogTotal now automatically detects formats and maps fields for exports from Google SecOps, CrowdStrike, MDE, and Sentinel. The tool also sanitizes parsed events locally in the browser before upload.

Key points

  • LogTotal adds support for exports from Google SecOps, CrowdStrike Falcon LogScale/Next-Gen SIEM, Microsoft Defender for Endpoint, and Microsoft Sentinel.
  • SOC Prime says LogTotal detects supported file formats and maps platform-specific fields so the same detection logic can analyze events across the four platforms.
  • The tool accepts uploaded or pasted .log, .json, .jsonl, .evtx, .csv, and .txt files, with stated limits of 3 GB or 3 million events.
  • SOC Prime says parsed events are sanitized locally in the browser, replacing hostnames, IPs, usernames, and secrets with stable HMAC tokens before upload.
  • The article says LogTotal processes events through about 1 million detection rules and 13,000 threat labels, with Higher Order Sigma rules and agentic AI.
  • Support for Splunk, IBM QRadar, and OpenSearch/Elasticsearch is planned.

Article Details

Event Type
Product capability announcement
Impact
LogTotal now supports log exports from Google SecOps, CrowdStrike Falcon LogScale / Next-Gen SIEM, Microsoft Defender for Endpoint (MDE), and Microsoft Sentinel. It detects supported file formats and maps platform-specific fields so security teams can analyze exports without manual conversion, field renaming, or custom parsers.

Vendors

CrowdStrikeSOC Prime’s LogTotal now supports log exports from four major SIEM and EDR platforms: Google SecOps, CrowdStrike Falcon LogScale / Next-Gen SIEM, Microsoft Defender for Endpoint (MDE), and Microsoft Sentinel.GoogleSOC Prime’s LogTotal now supports log exports from four major SIEM and EDR platforms: Google SecOps, CrowdStrike Falcon LogScale / Next-Gen SIEM, Microsoft Defender for Endpoint (MDE), and Microsoft Sentinel.MicrosoftSOC Prime’s LogTotal now supports log exports from four major SIEM and EDR platforms: Google SecOps, CrowdStrike Falcon LogScale / Next-Gen SIEM, Microsoft Defender for Endpoint (MDE), and Microsoft Sentinel.SOC PrimeSOC Prime’s LogTotal now supports log exports from four major SIEM and EDR platforms: Google SecOps, CrowdStrike Falcon LogScale / Next-Gen SIEM, Microsoft Defender for Endpoint (MDE), and Microsoft Sentinel.

Products

CrowdStrike Falcon LogScaleSOC Prime’s LogTotal now supports log exports from four major SIEM and EDR platforms: Google SecOps, CrowdStrike Falcon LogScale / Next-Gen SIEM, Microsoft Defender for Endpoint (MDE), and Microsoft Sentinel.Google SecOpsSOC Prime’s LogTotal now supports log exports from four major SIEM and EDR platforms: Google SecOps, CrowdStrike Falcon LogScale / Next-Gen SIEM, Microsoft Defender for Endpoint (MDE), and Microsoft Sentinel.LogTotalSOC Prime’s LogTotal now supports log exports from four major SIEM and EDR platforms: Google SecOps, CrowdStrike Falcon LogScale / Next-Gen SIEM, Microsoft Defender for Endpoint (MDE), and Microsoft Sentinel.Microsoft Defender for Endpoint (MDE)SOC Prime’s LogTotal now supports log exports from four major SIEM and EDR platforms: Google SecOps, CrowdStrike Falcon LogScale / Next-Gen SIEM, Microsoft Defender for Endpoint (MDE), and Microsoft Sentinel.Microsoft SentinelSOC Prime’s LogTotal now supports log exports from four major SIEM and EDR platforms: Google SecOps, CrowdStrike Falcon LogScale / Next-Gen SIEM, Microsoft Defender for Endpoint (MDE), and Microsoft Sentinel.Next-Gen SIEMSOC Prime’s LogTotal now supports log exports from four major SIEM and EDR platforms: Google SecOps, CrowdStrike Falcon LogScale / Next-Gen SIEM, Microsoft Defender for Endpoint (MDE), and Microsoft Sentinel.

Related Articles